Lucene search
+L

2 matches found

NVD
NVD
added 2026/06/02 4:16 p.m.16 views

CVE-2026-7299

Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject persistent XSS by a malicious table or column names triggering arbitrary code execution in the sessions of other...

6.3CVSS0.00341EPSS
SaveExploits2References6
ATTACKERKB
ATTACKERKB
added 2026/06/02 2:7 p.m.9 views

CVE-2026-7299

Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject persistent XSS by a malicious table or column names triggering arbitrary code execution in the sessions of other...

6.3CVSS6.4AI score0.00341EPSS
SaveExploits2References6
Rows per page
Query Builder